Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
File:                     CzDLxzPdxGhrNFVM7pbifWHsnC8.mft (raw, json)
Hash identifier:          aucYs036eecLrVPxlKWl11mj29Wng0bGRLBiKgB5+e4=
Subject key identifier:   11:C2:99:39:C9:F8:2F:25:F4:73:27:1F:73:8D:8F:EE:CE:68:12:DC
Authority key identifier: 0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F
Certificate issuer:       /CN=A9158019/serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
Manifest number:          6F
Signing time:             Tue 13 Oct 2026 08:39:27 +0000
Manifest this update:     Tue 13 Oct 2026 08:39:26 +0000
Manifest next update:     Tue 20 Oct 2026 08:39:26 +0000
Files and hashes:         1: CzDLxzPdxGhrNFVM7pbifWHsnC8.crl (hash: bIMCmw5ApIWy6VbA7jKjCfOZzFeP7JuGNvOIeEp2PDg=)
                          2: B7547D60211611F1BB46DDA8253D8C67.roa (hash: 4BrnHPdYyx2nAq2NGD+uA7GhClifWXkJBKq44iaOpAc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl
                          rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 08:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158019, serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F
        Validity
            Not Before: Oct 13 08:39:26 2026 GMT
            Not After : Oct 20 08:39:26 2026 GMT
        Subject: CN=6acdee3e-ce77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:87:cc:71:72:99:d4:77:58:e0:5f:4c:53:b8:
                    b6:81:bb:18:c6:7e:48:85:e8:52:5d:fe:a6:5e:09:
                    a5:65:0c:8b:a6:51:e2:1b:0f:6c:64:4f:88:71:82:
                    c3:c8:23:80:9f:c1:2e:c5:ca:bf:00:70:ef:5a:f3:
                    6f:dd:8d:23:ee:7c:a0:64:b3:65:32:6e:9f:f7:b6:
                    4d:06:c7:0a:60:f8:b0:ef:4c:67:54:4f:3b:55:4f:
                    13:1f:6d:62:ed:d7:e0:27:70:56:fe:90:45:69:b3:
                    ae:d1:df:bd:77:bf:ab:92:61:75:20:00:3c:55:50:
                    16:1b:b3:18:d2:ca:45:6b:9f:82:dd:1e:71:72:1f:
                    38:16:3a:bb:8d:e9:c4:46:08:bc:10:78:de:3f:0f:
                    8e:c2:42:1d:0b:9d:1e:51:fb:12:6a:ac:90:f5:ee:
                    0b:87:92:8e:3c:76:04:c1:ba:83:be:bc:86:ad:9c:
                    31:03:25:60:6b:03:af:b7:27:19:a5:27:e0:c3:69:
                    58:dd:c7:d4:f7:52:95:66:3c:3b:5f:f7:b3:4d:c9:
                    d6:81:2f:19:61:50:cc:85:ca:76:c6:86:7f:ba:68:
                    92:22:e9:ed:16:9f:18:30:62:36:b8:1d:02:1a:f7:
                    25:76:ae:bf:f7:fd:aa:4c:6f:5d:e5:52:c3:9a:10:
                    b2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C2:99:39:C9:F8:2F:25:F4:73:27:1F:73:8D:8F:EE:CE:68:12:DC
            X509v3 Authority Key Identifier:
                keyid:0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ed:df:84:d9:3d:15:0a:2c:6d:64:02:d9:bc:5a:06:59:94:
         42:89:58:b9:03:ba:f7:9e:64:ca:b8:cd:70:1b:23:b6:06:f6:
         5c:36:4f:db:d6:e4:19:8e:05:fa:0e:d3:c7:6b:e3:fe:1f:ee:
         6b:87:c9:75:e7:c5:13:cb:ba:21:15:11:b4:a0:c2:8a:69:e9:
         7c:48:01:cf:00:05:ff:e4:da:84:e7:a2:cb:4f:31:dd:5f:06:
         b3:e5:75:99:2d:7c:c8:e7:e9:61:1f:6a:18:e2:c5:a0:22:39:
         f5:33:f7:43:5c:e4:f2:08:a5:00:c2:b2:78:2a:e9:86:31:19:
         fb:44:1c:25:d0:75:f8:ae:82:5d:45:5c:1a:57:7a:6d:11:a6:
         7f:ad:e7:b8:df:61:8d:b3:55:98:01:77:76:09:9e:ab:3e:78:
         2c:4b:7e:cf:22:b3:64:64:0a:24:b3:67:e9:c6:26:80:e8:cd:
         2b:cb:49:ed:7a:a1:3a:f8:3d:dd:00:47:b2:54:f0:5e:e9:be:
         99:b6:9c:47:74:13:03:7c:13:03:3c:d3:ca:bb:25:ab:91:ed:
         c1:43:48:b3:ab:45:0c:1c:91:64:ea:29:ee:6d:69:99:e6:10:
         87:92:64:2c:78:42:c0:c3:9a:e8:8b:c2:34:76:ec:11:fc:bd:
         34:8a:ed:46
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
ODAxOTExMC8GA1UEBRMoMEIzMENCQzczM0REQzQ2ODZCMzQ1NTRDRUU5NkUyN0Q2
MUVDOUMyRjAeFw0yNjEwMTMwODM5MjZaFw0yNjEwMjAwODM5MjZaMBgxFjAUBgNV
BAMTDTZhY2RlZTNlLWNlNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJh8xxcpnUd1jgX0xTuLaBuxjGfkiF6FJd/qZeCaVlDIumUeIbD2xkT4hxgsPI
I4CfwS7Fyr8AcO9a82/djSPufKBks2Uybp/3tk0Gxwpg+LDvTGdUTztVTxMfbWLt
1+AncFb+kEVps67R3713v6uSYXUgADxVUBYbsxjSykVrn4LdHnFyHzgWOruN6cRG
CLwQeN4/D47CQh0LnR5R+xJqrJD17guHko48dgTBuoO+vIatnDEDJWBrA6+3Jxml
J+DDaVjdx9T3UpVmPDtf97NNydaBLxlhUMyFynbGhn+6aJIi6e0WnxgwYja4HQIa
9yV2rr/3/apMb13lUsOaELL3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEcKZOcn4
LyX0cycfc42P7s5oEtwwHwYDVR0jBBgwFoAUCzDLxzPdxGhrNFVM7pbifWHsnC8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MDE5L0ZGMjUzNTM4MjEx
MzExRjFBODU5MDY4QjI1M0Q4QzY3L0N6REx4elBkeEdock5GVk03cGJpZldIc25D
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQ3pETHh6UGR4R2hyTkZWTTdwYmlmV0hzbkM4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4
MDE5L0ZGMjUzNTM4MjExMzExRjFBODU5MDY4QjI1M0Q4QzY3L0N6REx4elBkeEdo
ck5GVk03cGJpZldIc25DOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBo7d+E2T0VCixtZALZvFoGWZRCiVi5A7r3nmTKuM1wGyO2BvZcNk/b1uQZjgX6
DtPHa+P+H+5rh8l158UTy7ohFRG0oMKKael8SAHPAAX/5NqE56LLTzHdXwaz5XWZ
LXzI5+lhH2oY4sWgIjn1M/dDXOTyCKUAwrJ4KumGMRn7RBwl0HX4roJdRVwaV3pt
EaZ/ree432GNs1WYAXd2CZ6rPngsS37PIrNkZAoks2fpxiaA6M0ry0nteqE6+D3d
AEeyVPBe6b6ZtpxHdBMDfBMDPNPKuyWrke3BQ0izq0UMHJFk6inubWmZ5hCHkmQs
eELAw5roi8I0duwR/L00iu1G
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:06:56 2026 by rpki-client